VPN mellem 2 cisco pix 501

Du kan finde en del hos cisco.com - eks:
http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a00800eb72b.html

Net 1: 192.168.1.0
Net 2: 192.168.2.0

Access-list laves som definere hvad der skal igennem tunnel eks.

access-list 100 permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0

Trafik imellem net skal ikke NAT's. Det angives således:

nat (inside) 0 access-list 100

IPsec og IKE skal defineres:

crypto ipsec transform-set espdesmd5 esp-des esp-md5-hmac
crypto map IPSec 10 ipsec-isakmp
crypto map IPSec 10 match address 100 (Chekker imod access-list 100)
crypto map IPSec 10 set peer 212.242.xxx.xxx (Offentlig IP på PIX i den anden ende)
crypto map IPSec 10 set transform-set espdesmd5
crypto map IPSec interface outside
isakmp enable outside
isakmp key >Pre- shared key< address 212.242.xxx.xxx netmask 255.255.255.255 no-xauth no-config-mode
isakmp identity address
isakmp policy 8 authentication pre-share
isakmp policy 8 encryption des
isakmp policy 8 hash md5
isakmp policy 8 group 1
isakmp policy 8 lifetime 86400

Det samme skal indtastes på den anden PIX.. Dog skal nettene i Access-list 100 byttes rundt og peer adressen skal udskiftes både i "crypto map IPSec 10 set peer " og "isakmp key >Pre- shared key< address "

Det var 'en måde at gøre det på...


/Rubeck

Ups